The Benchmark for Cyber Frameworks

Competency & Capability

CIISec's updated Skills Framework is a comprehensive framework designed to define the competencies expected of professionals in the fields of information security, cyber, digital, and information assurance. It emphasises the practical application of skills rather than just theoretical knowledge, acknowledging that the field is constantly evolving and requires adaptability to new technologies and threats.

The framework outlines various skill areas crucial for professionals, including governance, risk management, threat assessment, secure system implementation, incident management, and more. It also introduces a new skill area, Cyber Digital Intelligence.

The framework's structure and emphasis strongly suggest the adoption of CIISec’s competency and capability-based approach, aiming to define and assess skills in a way that is relevant to real-world job performance and professional development in the cybersecurity field.

Several clues point towards the underlying principles and influences behind the framework's structure.

• Focus on practical application: The framework emphasises the practical application of skills, suggesting a competency-based approach where the focus is on what professionals can do rather than just what they know.
• Detailed skill levels: The six skill levels, with their detailed descriptions using action verbs, indicate a capability model where progression is defined by increasing levels of responsibility, autonomy, and complexity of tasks.
• Alignment with professional roles: The framework mentions its connection to the CIISec Roles Framework, which outlines skills for specific roles, further suggesting an alignment with competency models that link skills to job functions.
• Industry collaboration: The framework's development involved collaboration with various stakeholders to capture industry-recognised competencies and capabilities.

Overall, Version 3.0 of the CIISec Skills Framework serves as a valuable resource for professionals and organisations in the cybersecurity domain. It offers a structured approach to skill development, assessment, and benchmarking, ensuring that professionals are equipped to handle the challenges of the ever-changing cybersecurity landscape.

Finally, it's a great opportunity for CIISec's existing and new members to refresh their knowledge of this widely used and much celebrated Skills Framework.

Thanks for providing the overview today Dr Mike Humphrey & Dominic Louks ACIM #CIISec